1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
|
#!/bin/bash
# SPDX-License-Identifier: MIT
# shell "strict" mode
set -uo pipefail
readonly PATH="/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin"
export PATH
umask 077
print_help() {
printf '%s\n' "tessen - select, autotype, and copy your password-store data"
printf '%s\n' "tessen can use one of the following backends to process password-store data"
printf '%s\n' " - bemenu (copy + autotype) - the default choice"
printf '%s\n' " - rofi (copy + autotype) - lbonn wayland fork"
printf '%s\n' " - fzf (copy only when run from a terminal) - limited functionality" ""
printf '%s\n' "usage: [-h] [-b backend] [-t seconds]"
printf '%s\n' "Command Summary:"
printf '%s\n' " -h show this help menu"
printf '%s\n' " -b choose either bemenu, rofi, or fzf"
printf '%s\n' " -s number of seconds to keep copied data in clipboard"
}
BACKEND="bemenu"
CLIP_TIME=15
while getopts ':hb:s:' opt; do
case "$opt" in
h)
print_help
exit 0
;;
b) BACKEND="$OPTARG" ;;
s) CLIP_TIME="$OPTARG" ;;
\?)
notify-send "invalid option: -$OPTARG"
exit 1
;;
:)
notify-send "option -$OPTARG requires a value"
exit 1
;;
esac
done
unset -v opt
shift $((OPTIND - 1))
readonly CLIP_TIME
readonly BACKEND
# the default options for bemenu and fzf
if [[ "$BACKEND" == "bemenu" ]]; then
bmn_opt=("-i -l 10 -w --scrollbar=autohide -n")
readonly BEMENU_OPTS="${BEMENU_OPTS:-${bmn_opt[*]}}"
export BEMENU_OPTS
unset -v bmn_opt
elif [[ "$BACKEND" == "fzf" ]]; then
readonly FZF_DEFAULT_COMMAND=""
fzf_opt=("--no-multi --height=100 --info=hidden --prompt='pass: ' --layout=reverse")
readonly FZF_DEFAULT_OPTS="${fzf_opt[*]}"
export FZF_DEFAULT_COMMAND
export FZF_DEFAULT_OPTS
unset -v fzf_opt
fi
# check if the value of CLIP_TIME is valid and contains only digits
check_clip_time() {
local clip_regex
clip_regex="^[[:digit:]]+$"
if [[ "$CLIP_TIME" =~ $clip_regex ]]; then
return 0
else
notify-send "invalid clipboard time provided"
exit 1
fi
}
check_clip_time
# initialize the primary global variables
readonly PASS_STORE="${PASSWORD_STORE_DIR:-$HOME/.password-store}"
PASSFILE="" # password file chosen by the user for decryption
declare -A PASSDATA_ARR # decrypted password-store data except the password
USERNAME=""
PASSWORD=""
# exit if the password store directory doesn't exist
if ! [[ -d "$PASS_STORE" ]]; then
notify-send "password store not found"
exit 1
fi
# display and get the shortened path of the password file
get_pass_file() {
local tmp_pass_1 tmp_pass_2 tmp_pass_3
# temporarily enable globbing to get the list of gpg files
shopt -s nullglob globstar
tmp_pass_1=("$PASS_STORE"/**/*.gpg)
tmp_pass_2=("${tmp_pass_1[@]#"$PASS_STORE"/}")
tmp_pass_3=("${tmp_pass_2[@]%.gpg}")
shopt -u nullglob globstar
if [[ "$BACKEND" == "bemenu" ]]; then
PASSFILE="$(printf '%s\n' "${tmp_pass_3[@]}" | bemenu)"
elif [[ "$BACKEND" == "rofi" ]]; then
PASSFILE="$(printf '%s\n' "${tmp_pass_3[@]}" | rofi -dmenu)"
elif [[ "$BACKEND" == "fzf" ]]; then
PASSFILE="$(printf '%s\n' "${tmp_pass_3[@]}" | fzf --preview='pass {}')"
else
exit 1
fi
if [[ -z "$PASSFILE" ]]; then
exit 1
fi
}
# get the password data including username and other keys
get_pass_data() {
local passdata passdata_regex idx key val
mapfile -t passdata < <(pass "$PASSFILE")
# ASSUMPTION: the key can contain alphanumerics, spaces, hyphen, underscore
# the value can contain anything but it has to follow after a space
passdata_regex="^[[:alnum:][:blank:]_-]+:[[:blank:]].+$"
# ASSUMPTION: the basename of the gpg file is the username although one can still
# select a username field inside the file
USERNAME="${PASSFILE##*/}"
# ASSUMPTION: the first line of $PASSFILE will contain the password
PASSWORD="${passdata[0]}"
# skip the password, validate each entry against $passdata_regex, store valid results
# ASSUMPTION: each key is unique otherwise, the value of the last non-unique key will be used
for idx in "${passdata[@]:1}"; do
if [[ "$idx" =~ $passdata_regex ]]; then
key="${idx%%:*}"
val="${idx##*: }"
PASSDATA_ARR["$key"]="$val"
else
continue
fi
done
}
# the menu for selecting and copying the decrypted data
key_menu() {
local choice
if [[ "$BACKEND" == "bemenu" ]]; then
choice="$(printf '%s\n' "username" "password" "${!PASSDATA_ARR[@]}" | bemenu)"
elif [[ "$BACKEND" == "rofi" ]]; then
choice="$(printf '%s\n' "username" "password" "${!PASSDATA_ARR[@]}" | rofi -dmenu)"
elif [[ "$BACKEND" == "fzf" ]]; then
choice="$(printf '%s\n' "username" "password" "${!PASSDATA_ARR[@]}" | fzf)"
else
exit 1
fi
if [[ -z "$choice" ]]; then
exit 1
fi
if [[ "$choice" == "username" ]]; then
wl-copy "$USERNAME"
notify-send "username copied, clearing in $CLIP_TIME seconds ..."
nohup sh -c "sleep $CLIP_TIME; wl-copy --clear" > /dev/null 2>&1 &
elif [[ "$choice" == "password" ]]; then
wl-copy "$PASSWORD"
notify-send "password copied, clearing in $CLIP_TIME seconds ..."
nohup sh -c "sleep $CLIP_TIME; wl-copy --clear" > /dev/null 2>&1 &
disown
elif [[ -n "${PASSDATA_ARR[$choice]}" ]]; then
wl-copy "${PASSDATA_ARR[$choice]}"
notify-send "$choice copied, clearing in $CLIP_TIME seconds ..."
nohup sh -c "sleep $CLIP_TIME; wl-copy --clear" > /dev/null 2>&1 &
disown
else
exit 1
fi
}
# cleanup jobs before the script exits
clean() {
wl-copy --clear
unset -v PASSFILE
unset -v USERNAME
unset -v PASSWORD
unset -v PASSDATA_ARR
unset -v CLIP_TIME
}
get_pass_file
get_pass_data
key_menu
# case "$RESPONSE" in
# autotype)
# wtype -s 200 "$USERNAME" && wtype -P tab -p tab -s 200 && wtype -s 200 "$PASSWORD"
# ;;
# username)
# wtype -s 200 "$USERNAME"
# ;;
# password)
# wtype -s 200 "$PASSWORD"
# ;;
# *)
# for key in "${!NEWPASSDATA[@]}"; do
# if [ "$key" == "$RESPONSE" ]; then
# wtype -s 200 "${NEWPASSDATA[$RESPONSE]}"
# fi
# done
# exit 1
# ;;
# esac
|